Q: What client version is required for the detection of non-leap ap's
(Tattle Tale)? when will this version be posted to CCO?
A: The client firmware that provides the LEAP "tattle tale" feature will
available in future .
The AP will receive a "Potential Rogue AP" message, which falls into "Protocol Alert" category- "Event Disposition" level for Protocol Alert would need to be set to higher level (4=notify) in order to generate SNMP traps.
For detailed information on this topic please refer the Rogue AP Detection and Mitigation Application Note which is available from the Enterprise Solutions Engineering home page, http://wwwin.cisco.com/ent/ese/ by clicking the Wireless and Design Guidance links
----------------------------------------------------------
Preventing Rogue Access Points
The first priority for enterprise IT security departments should be to prevent rogue APs in the first place.
·
**Create and publish policy banning employee installations of WLAN equipment
·
**Physical security of enterprise premises
·
**Provide a supported WLAN infrastructure – removing the motivation for employee installs
·
**Implement IEEE 802.1x Port Based Security
·
**Use Catalyst Switch filters
-----------------------------------------------------
Detecting Rogue APs
In addition to the rogue AP prevention mechanisms mentioned above, a combination of the following rogue AP detection methods should also be used by the IT security administrator;
· Detecting Rogue APs Wirelessly
· Detecting Rogue APs from the wired network
· Detecting Rogue APs by Physical Observation
Nilesh
